Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 22:54:01.492 00:06:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 22:59:19.873 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6438 1 2025-07-23 23:00:20.275 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36120 10 6438 1 2025-07-23 23:01:20.675 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39058 10 6438 1 2025-07-23 23:02:21.038 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33858 10 6438 1 2025-07-23 23:02:36.240 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:02:36.075 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:02:36.295 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:02:36.282 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:02:36.322 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:03:21.457 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36636 10 6438 1 2025-07-23 22:59:01.497 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 23:04:21.861 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39852 10 6438 1 2025-07-23 23:05:22.280 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44988 10 6438 1 2025-07-23 23:01:01.495 00:06:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 23:06:22.682 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42586 10 6438 1 2025-07-23 23:07:23.102 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49414 10 6438 1 2025-07-23 23:07:36.395 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:07:36.302 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:07:36.492 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:07:36.387 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:07:36.313 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:08:23.462 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52530 10 6438 1 2025-07-23 23:09:23.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 10 6438 1 2025-07-23 23:10:24.227 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6438 1 2025-07-23 23:06:01.499 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 23:11:24.629 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54436 10 6438 1 2025-07-23 23:12:36.379 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:12:36.294 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:12:36.156 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:12:25.037 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34090 10 6438 1 2025-07-23 23:12:36.301 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:12:36.384 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:08:01.498 00:06:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 23:13:25.405 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57664 10 6438 1 2025-07-23 23:14:25.811 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53656 10 6438 1 2025-07-23 23:15:26.172 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58632 10 6438 1 2025-07-23 23:16:26.543 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48480 10 6438 1 2025-07-23 23:17:36.457 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:17:36.322 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:17:36.159 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:17:26.946 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51090 10 6438 1 2025-07-23 23:17:36.376 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:17:36.311 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:13:01.500 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 23:18:27.314 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45818 10 6438 1 2025-07-23 23:19:27.672 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59050 10 6438 1 2025-07-23 23:15:01.498 00:06:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 23:20:28.098 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58314 10 6438 1 2025-07-23 23:21:28.513 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35458 10 6438 1 2025-07-23 23:22:36.665 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:22:36.680 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:22:36.739 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:22:36.751 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:22:28.912 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43420 10 6438 1 2025-07-23 23:22:36.583 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:23:29.319 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50986 10 6438 1 2025-07-23 23:24:29.678 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36804 10 6438 1 2025-07-23 23:20:01.501 00:06:00.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 23:25:30.108 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:42326 10 6438 1 2025-07-23 23:26:30.505 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54280 10 6438 1 2025-07-23 23:22:01.498 00:06:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 23:27:36.494 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:27:36.568 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:27:36.397 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:27:36.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:27:36.652 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:27:30.907 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6438 1 2025-07-23 23:28:31.314 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47634 10 6438 1 2025-07-23 23:29:31.677 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41410 10 6438 1 2025-07-23 23:30:32.107 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39032 10 6438 1 2025-07-23 23:31:32.507 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38298 10 6438 1 2025-07-23 23:27:01.503 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 23:32:36.485 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:32:36.692 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:32:36.434 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:32:36.631 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:32:36.714 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:32:32.925 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:58728 11 6490 1 2025-07-23 23:33:33.353 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57752 10 6438 1 2025-07-23 23:29:01.500 00:06:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 23:34:33.755 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:34522 10 6438 1 2025-07-23 23:35:34.132 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46950 10 6438 1 2025-07-23 23:36:34.539 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54576 10 6438 1 2025-07-23 23:37:36.788 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:37:36.701 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:37:36.714 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:37:36.895 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:37:36.979 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:37:34.937 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33382 10 6438 1 2025-07-23 23:38:35.356 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34092 10 6438 1 2025-07-23 23:34:01.503 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 23:39:35.760 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48858 10 6438 1 2025-07-23 23:40:36.166 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39810 10 6438 1 2025-07-23 23:36:01.500 00:06:00.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 23:41:36.587 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34822 10 6438 1 2025-07-23 23:42:36.942 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:42:36.865 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:42:36.860 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:42:36.918 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:42:36.858 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:42:36.987 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43906 10 6438 1 2025-07-23 23:43:37.391 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42782 10 6438 1 2025-07-23 23:44:37.793 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34476 10 6438 1 2025-07-23 23:45:38.203 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38414 10 6438 1 2025-07-23 23:41:01.504 00:06:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 23:46:38.608 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52768 10 6438 1 2025-07-23 23:47:37.180 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:47:37.115 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:47:37.125 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:47:37.185 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:47:37.269 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:47:39.016 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56008 10 6438 1 2025-07-23 23:43:01.503 00:06:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 23:48:39.376 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57932 10 6438 1 2025-07-23 23:49:39.739 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58362 10 6438 1 2025-07-23 23:50:40.156 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54170 10 6438 1 2025-07-23 23:51:40.558 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50108 10 6438 1 2025-07-23 23:52:37.214 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:52:37.088 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:52:37.229 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:52:37.094 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:52:37.178 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:52:40.964 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59438 10 6438 1 2025-07-23 23:48:01.508 00:06:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 23:53:41.366 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43434 10 6438 1 2025-07-23 23:54:41.784 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54962 10 6438 1 2025-07-23 23:50:01.505 00:06:00.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 23:55:42.202 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54130 10 6438 1 2025-07-23 23:56:42.602 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38460 10 6438 1 2025-07-23 23:57:36.995 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:57:37.236 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 23:57:37.271 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 23:57:37.231 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 23:57:37.319 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 23:57:43.018 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59040 10 6438 1 Summary: total flows: 136, total bytes: 409651, total packets: 1009, avg bps: 855, avg pps: 0, avg bpp: 405 Time window: 2025-07-23 22:54:01 - 2025-07-23 23:57:53 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0039s User: 0.0000s Wall: 0.0024s flows/second: 55553.7 Runtime: 0.0025s