Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-30 22:54:05.125 00:06:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 22:59:28.688 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40548 10 6452 1 2025-07-30 23:00:29.114 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57222 10 6452 1 2025-07-30 23:00:58.197 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:00:58.126 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:00:57.987 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:00:58.206 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:00:58.290 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:01:29.510 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36048 10 6452 1 2025-07-30 23:02:29.915 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34486 10 6452 1 2025-07-30 23:03:30.318 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43666 10 6452 1 2025-07-30 23:04:30.719 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55812 10 6452 1 2025-07-30 23:00:05.128 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-30 23:05:31.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51140 10 6452 1 2025-07-30 23:05:58.633 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:05:58.405 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:05:58.616 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:05:58.033 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:05:58.550 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:01:05.125 00:06:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 23:06:31.553 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50022 10 6452 1 2025-07-30 23:07:31.918 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37024 10 6452 1 2025-07-30 23:08:32.320 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:47564 10 6452 1 2025-07-30 23:09:32.740 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37096 10 6452 1 2025-07-30 23:10:33.150 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52442 10 6452 1 2025-07-30 23:10:58.621 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:10:58.490 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:10:58.418 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:10:58.374 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:10:58.538 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:11:33.556 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50410 10 6452 1 2025-07-30 23:07:05.131 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-30 23:12:33.961 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6452 1 2025-07-30 23:08:05.129 00:06:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 23:13:34.383 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-07-30 23:14:34.787 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-07-30 23:15:35.188 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32844 10 6452 1 2025-07-30 23:15:58.513 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:15:58.583 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:15:58.328 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:15:58.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:15:58.662 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:16:35.593 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44002 10 6452 1 2025-07-30 23:17:36.003 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46756 10 6452 1 2025-07-30 23:18:36.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50554 10 6452 1 2025-07-30 23:14:05.133 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-30 23:19:36.814 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44254 10 6452 1 2025-07-30 23:15:05.130 00:06:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 23:20:37.223 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49950 10 6452 1 2025-07-30 23:20:58.802 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:20:58.718 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:20:58.629 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:20:58.521 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:20:58.603 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:21:37.621 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54008 10 6452 1 2025-07-30 23:22:38.027 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49646 10 6452 1 2025-07-30 23:23:38.397 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:42744 12 10367 1 2025-07-30 23:24:38.883 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:40486 10 6452 1 2025-07-30 23:25:39.309 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-07-30 23:25:58.980 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:25:58.824 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:25:58.943 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:25:58.678 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:25:58.896 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:21:05.136 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-30 23:26:39.708 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44648 10 6452 1 2025-07-30 23:22:05.135 00:06:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 23:27:40.118 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35668 10 6452 1 2025-07-30 23:28:40.533 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48862 10 6452 1 2025-07-30 23:29:40.932 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:42738 10 6452 1 2025-07-30 23:30:58.989 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:30:41.348 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51270 10 6452 1 2025-07-30 23:30:58.734 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:30:59.005 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:30:58.908 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:30:58.907 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:31:41.747 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54832 10 6452 1 2025-07-30 23:32:42.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34788 10 6452 1 2025-07-30 23:28:05.138 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-30 23:33:42.553 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55352 10 6452 1 2025-07-30 23:29:05.136 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 23:34:42.956 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:33970 10 6452 1 2025-07-30 23:35:43.331 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34186 10 6452 1 2025-07-30 23:35:59.070 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:35:58.988 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:35:58.902 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:35:58.855 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:35:58.988 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:36:43.745 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35464 10 6452 1 2025-07-30 23:37:44.111 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45918 10 6452 1 2025-07-30 23:38:44.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-07-30 23:39:44.925 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:40514 10 6452 1 2025-07-30 23:35:05.142 00:06:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-30 23:40:58.961 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:40:59.131 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:40:58.979 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:40:45.352 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45616 10 6452 1 2025-07-30 23:40:59.048 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:40:59.131 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:36:05.145 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 23:41:45.754 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-07-30 23:42:46.122 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40808 10 6452 1 2025-07-30 23:43:46.522 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:34574 12 10365 1 2025-07-30 23:44:47.025 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45262 10 6452 1 2025-07-30 23:45:59.280 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:45:59.053 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:45:59.202 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:45:59.088 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:45:59.198 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:45:47.430 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49896 10 6452 1 2025-07-30 23:46:47.839 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58696 10 6452 1 2025-07-30 23:42:05.146 00:06:00.280 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-30 23:47:48.260 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42284 10 6452 1 2025-07-30 23:43:05.144 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 23:48:48.666 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52844 10 6452 1 2025-07-30 23:49:49.030 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48710 10 6452 1 2025-07-30 23:50:59.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:50:59.173 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:50:49.431 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49920 10 6452 1 2025-07-30 23:50:59.211 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:50:59.376 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:50:59.459 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:51:49.791 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38782 10 6452 1 2025-07-30 23:52:50.157 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35198 10 6452 1 2025-07-30 23:53:50.561 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42044 10 6452 1 2025-07-30 23:49:05.147 00:06:00.280 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-30 23:54:50.936 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33002 10 6452 1 2025-07-30 23:50:05.146 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-30 23:55:59.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-30 23:55:59.199 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:55:59.223 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-30 23:55:59.321 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-30 23:55:59.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-30 23:55:51.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 10 6452 1 2025-07-30 23:56:51.763 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52498 10 6452 1 2025-07-30 23:57:52.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60800 10 6452 1 Summary: total flows: 136, total bytes: 418253, total packets: 1012, avg bps: 871, avg pps: 0, avg bpp: 413 Time window: 2025-07-30 22:54:05 - 2025-07-30 23:58:02 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0026s User: 0.0017s Wall: 0.0021s flows/second: 65131.9 Runtime: 0.0021s