Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-31 17:54:05.525 00:06:00.254 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 17:59:20.969 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:52602 10 6452 1 2025-07-31 17:55:05.523 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:00:21.348 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39124 10 6452 1 2025-07-31 18:01:21.195 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:01:21.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:01:20.975 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:01:20.852 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:01:21.113 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:01:21.751 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56302 10 6452 1 2025-07-31 18:02:22.160 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51196 10 6452 1 2025-07-31 18:03:22.567 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37260 10 6452 1 2025-07-31 18:04:22.969 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41138 10 6452 1 2025-07-31 18:05:23.391 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48932 10 6452 1 2025-07-31 18:01:05.526 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 18:06:21.423 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:06:21.602 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:06:21.563 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:06:21.613 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:06:21.695 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:06:23.796 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38748 10 6452 1 2025-07-31 18:02:05.524 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:07:24.202 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37570 10 6452 1 2025-07-31 18:08:24.614 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:42222 12 10367 1 2025-07-31 18:09:25.114 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42868 10 6452 1 2025-07-31 18:10:25.491 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:35006 10 6452 1 2025-07-31 18:11:21.273 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:11:21.270 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:11:21.294 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:11:21.273 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:11:21.355 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:11:25.862 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43858 10 6452 1 2025-07-31 18:12:26.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38510 10 6452 1 2025-07-31 18:08:05.534 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 18:13:26.677 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50874 10 6452 1 2025-07-31 18:09:05.530 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:14:27.062 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55588 10 6452 1 2025-07-31 18:15:27.467 00:00:10.868 TCP 1.101.0.1:3000 -> 23.104.0.1:53700 10 6452 1 2025-07-31 18:16:21.423 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:16:21.448 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:16:21.619 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:16:21.271 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:16:21.340 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:16:28.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60016 10 6452 1 2025-07-31 18:17:28.773 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46616 10 6452 1 2025-07-31 18:18:29.184 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 12 10576 1 2025-07-31 18:19:29.669 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55226 10 6661 1 2025-07-31 18:15:05.536 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 18:20:30.104 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51314 10 6661 1 2025-07-31 18:16:05.532 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:21:21.719 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:21:21.670 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:21:21.661 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:21:21.675 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:21:21.757 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:21:30.485 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55362 10 6661 1 2025-07-31 18:22:30.889 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51720 10 6661 1 2025-07-31 18:23:31.310 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56566 10 6661 1 2025-07-31 18:24:31.720 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6661 1 2025-07-31 18:25:32.122 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58228 10 6661 1 2025-07-31 18:26:22.072 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:26:21.935 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:26:21.934 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:26:21.623 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:26:21.989 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:26:32.528 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52514 10 6661 1 2025-07-31 18:22:05.536 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 18:27:32.933 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33634 10 6661 1 2025-07-31 18:23:05.534 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:28:33.360 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:48874 10 6661 1 2025-07-31 18:29:33.720 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:59668 10 6661 1 2025-07-31 18:30:34.199 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44268 10 6661 1 2025-07-31 18:31:21.637 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:31:21.642 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:31:21.595 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:31:21.752 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:31:21.836 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:31:34.569 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35510 10 6661 1 2025-07-31 18:32:34.944 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38192 10 6661 1 2025-07-31 18:33:35.311 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:47544 10 6661 1 2025-07-31 18:29:05.537 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 18:34:35.686 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34524 10 6661 1 2025-07-31 18:30:05.536 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:35:36.115 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58364 10 6661 1 2025-07-31 18:36:21.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:36:21.906 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:36:21.600 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:36:21.956 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:36:22.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:36:36.513 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39436 10 6661 1 2025-07-31 18:37:36.937 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:59146 10 6661 1 2025-07-31 18:38:37.372 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39018 10 6661 1 2025-07-31 18:39:37.775 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36516 10 6661 1 2025-07-31 18:40:38.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50994 10 6661 1 2025-07-31 18:36:05.538 00:06:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 18:41:22.053 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:41:21.913 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:41:21.753 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:41:21.970 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:41:21.972 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:41:38.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54826 10 6661 1 2025-07-31 18:37:05.535 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:42:38.988 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50966 10 6661 1 2025-07-31 18:43:39.353 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42902 10 6661 1 2025-07-31 18:44:39.758 00:00:11.590 TCP 1.101.0.1:3000 -> 23.104.0.1:38858 10 6661 1 2025-07-31 18:45:41.386 00:00:14.281 TCP 1.101.0.1:3000 -> 23.104.0.1:54792 10 6661 1 2025-07-31 18:46:22.096 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:46:21.993 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:46:21.817 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:46:21.885 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:46:21.968 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:46:45.702 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55692 10 6661 1 2025-07-31 18:47:46.115 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50492 10 6661 1 2025-07-31 18:43:05.542 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 18:48:46.525 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51030 10 6661 1 2025-07-31 18:44:05.539 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:49:46.929 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:41974 10 6661 1 2025-07-31 18:50:47.353 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37018 10 6661 1 2025-07-31 18:51:22.249 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:51:22.254 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:51:22.052 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:51:22.137 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:51:22.220 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:51:47.755 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53152 10 6661 1 2025-07-31 18:52:48.171 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48198 10 6661 1 2025-07-31 18:53:48.532 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59420 10 6661 1 2025-07-31 18:54:48.929 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:59964 10 6661 1 2025-07-31 18:50:05.542 00:06:00.254 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 18:55:49.356 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35978 10 6661 1 2025-07-31 18:51:05.541 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 18:56:22.314 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 18:56:22.241 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 18:56:21.964 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:56:22.449 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 18:56:22.531 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 18:56:49.751 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 10 6661 1 2025-07-31 18:57:50.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34576 10 6661 1 Summary: total flows: 137, total bytes: 427476, total packets: 1026, avg bps: 891, avg pps: 0, avg bpp: 416 Time window: 2025-07-31 17:54:05 - 2025-07-31 18:58:00 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0060s User: 0.0020s Wall: 0.0032s flows/second: 42273.2 Runtime: 0.0033s