Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 15:54:01.348 00:06:00.477 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 15:59:29.551 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 10 6438 1 2025-07-23 16:00:29.956 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6438 1 2025-07-23 16:01:30.328 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41492 10 6438 1 2025-07-23 16:02:27.730 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:02:27.731 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:02:27.800 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:02:27.712 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:02:27.795 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:02:30.739 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40490 10 6438 1 2025-07-23 16:03:31.143 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46022 10 6438 1 2025-07-23 15:59:01.351 00:06:00.473 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 16:04:31.549 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33090 10 6438 1 2025-07-23 16:05:31.913 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34604 10 6438 1 2025-07-23 16:01:01.349 00:06:00.477 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 16:06:32.328 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51518 12 6542 1 2025-07-23 16:07:27.734 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:07:27.740 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:07:27.334 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:07:27.737 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:07:27.820 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:07:32.733 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59616 10 6438 1 2025-07-23 16:08:33.144 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38584 10 6438 1 2025-07-23 16:09:33.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6438 1 2025-07-23 16:10:33.953 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39512 10 6438 1 2025-07-23 16:06:01.354 00:06:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 16:11:34.357 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60306 10 6438 1 2025-07-23 16:12:27.985 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:12:28.112 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:12:27.466 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:12:28.189 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:12:28.272 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:12:34.763 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58982 10 6438 1 2025-07-23 16:08:01.352 00:06:00.478 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 16:13:35.175 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33624 10 6438 1 2025-07-23 16:14:35.575 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39988 10 6438 1 2025-07-23 16:15:35.979 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 10 6438 1 2025-07-23 16:16:36.385 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46266 10 6438 1 2025-07-23 16:17:27.812 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:17:27.954 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:17:28.075 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:17:27.972 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:17:28.056 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:17:36.786 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46910 10 6438 1 2025-07-23 16:13:01.354 00:06:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 16:18:37.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 10 6438 1 2025-07-23 16:19:37.567 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47092 10 6438 1 2025-07-23 16:15:01.354 00:06:00.479 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 16:20:37.970 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37752 10 6438 1 2025-07-23 16:21:38.351 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44840 10 6438 1 2025-07-23 16:22:28.029 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:22:27.947 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:22:27.937 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:22:28.075 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:22:27.845 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:22:38.758 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36752 10 6438 1 2025-07-23 16:23:39.133 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37526 10 6438 1 2025-07-23 16:24:39.540 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47778 10 6438 1 2025-07-23 16:20:01.357 00:06:00.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 16:25:39.944 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39000 10 6438 1 2025-07-23 16:26:40.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44818 10 6438 1 2025-07-23 16:22:01.355 00:06:00.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 16:27:28.175 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:27:28.181 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:27:27.994 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:27:28.106 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:27:28.191 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:27:40.763 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44540 10 6438 1 2025-07-23 16:28:41.181 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42038 10 6438 1 2025-07-23 16:29:41.585 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:46430 10 6438 1 2025-07-23 16:30:41.988 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36088 10 6438 1 2025-07-23 16:31:42.356 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42880 10 6438 1 2025-07-23 16:27:01.359 00:06:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 16:32:28.234 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:32:28.393 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:32:28.396 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:32:28.069 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:32:28.152 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:32:42.761 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41176 10 6438 1 2025-07-23 16:33:43.189 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60764 10 6438 1 2025-07-23 16:29:01.357 00:06:00.482 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 16:34:43.594 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59058 10 6438 1 2025-07-23 16:35:43.963 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47316 10 6438 1 2025-07-23 16:36:44.361 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44048 10 6438 1 2025-07-23 16:37:28.350 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:37:28.293 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:37:28.312 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:37:28.416 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:37:28.499 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:37:44.766 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59200 10 6438 1 2025-07-23 16:38:45.186 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:35492 12 10350 1 2025-07-23 16:34:01.360 00:06:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 16:39:45.686 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41960 10 6438 1 2025-07-23 16:40:46.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57516 10 6438 1 2025-07-23 16:36:01.358 00:06:00.483 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 16:41:46.516 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44082 10 6438 1 2025-07-23 16:42:28.582 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:42:28.485 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:42:28.625 00:00:00.016 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:42:28.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:42:28.756 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:42:46.917 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45368 10 6438 1 2025-07-23 16:43:47.318 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35118 10 6438 1 2025-07-23 16:44:47.725 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40178 10 6438 1 2025-07-23 16:45:48.133 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54014 10 6438 1 2025-07-23 16:41:01.362 00:06:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 16:46:48.535 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60440 10 6438 1 2025-07-23 16:47:28.537 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:47:28.479 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:47:28.332 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:47:28.597 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:47:28.681 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:47:48.942 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6438 1 2025-07-23 16:43:01.359 00:06:00.483 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 16:48:49.324 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:39282 12 10352 1 2025-07-23 16:49:49.801 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59338 10 6438 1 2025-07-23 16:50:50.205 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54750 10 6438 1 2025-07-23 16:51:50.604 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6438 1 2025-07-23 16:52:28.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:52:28.678 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:52:28.645 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:52:28.564 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:52:28.648 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:52:51.024 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54934 10 6438 1 2025-07-23 16:48:01.365 00:06:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 16:53:51.451 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50958 10 6438 1 2025-07-23 16:54:51.858 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 10 6438 1 2025-07-23 16:50:01.362 00:06:00.482 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 16:55:52.267 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38720 10 6438 1 2025-07-23 16:56:52.670 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56634 10 6438 1 2025-07-23 16:57:29.149 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 16:57:29.317 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 16:57:29.256 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:57:29.307 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 16:57:29.391 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 16:57:53.096 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:49738 12 10352 1 Summary: total flows: 136, total bytes: 421443, total packets: 1016, avg bps: 877, avg pps: 0, avg bpp: 414 Time window: 2025-07-23 15:54:01 - 2025-07-23 16:58:03 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0031s User: 0.0010s Wall: 0.0026s flows/second: 51594.2 Runtime: 0.0027s