Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 03:53:58.264 00:06:00.655 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 03:59:23.034 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58284 10 6438 1 2025-07-18 03:59:48.831 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 03:59:48.787 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 03:59:48.697 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 03:59:48.695 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 03:59:48.779 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:00:23.430 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41684 10 6438 1 2025-07-18 03:55:58.268 00:06:00.649 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:01:23.835 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44208 10 6438 1 2025-07-18 04:02:24.234 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60076 10 6438 1 2025-07-18 04:03:24.635 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45384 10 6438 1 2025-07-18 04:04:25.040 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39458 10 6438 1 2025-07-18 04:04:48.777 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:04:48.903 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:04:48.859 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:04:48.769 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:04:48.942 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:05:25.447 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54096 10 6438 1 2025-07-18 04:00:58.266 00:06:00.655 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 04:06:25.851 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:33262 10 6438 1 2025-07-18 04:07:26.278 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48344 10 6438 1 2025-07-18 04:02:58.268 00:06:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:08:26.683 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41810 10 6438 1 2025-07-18 04:09:27.117 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:35218 10 6438 1 2025-07-18 04:09:48.988 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:09:48.917 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:09:49.158 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:09:48.906 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:09:48.790 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:10:27.490 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42454 10 6438 1 2025-07-18 04:11:27.900 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 10 6438 1 2025-07-18 04:12:28.299 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44920 10 6438 1 2025-07-18 04:07:58.266 00:06:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 04:13:28.704 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:60902 12 10350 1 2025-07-18 04:14:29.190 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44308 10 6438 1 2025-07-18 04:14:49.185 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:14:48.808 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:14:48.846 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:14:49.103 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:14:49.105 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:09:58.270 00:06:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:15:29.597 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:52902 11 6490 1 2025-07-18 04:16:30.062 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54512 11 6490 1 2025-07-18 04:17:30.483 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56042 10 6438 1 2025-07-18 04:18:30.890 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58536 10 6438 1 2025-07-18 04:19:49.277 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:19:31.313 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6438 1 2025-07-18 04:19:49.094 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:19:49.007 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:19:49.193 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:19:48.901 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:14:58.268 00:06:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 04:20:31.721 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60906 10 6438 1 2025-07-18 04:21:32.132 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48808 10 6438 1 2025-07-18 04:16:58.270 00:06:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:22:32.536 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 10 6438 1 2025-07-18 04:23:32.932 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:35064 10 6438 1 2025-07-18 04:24:33.360 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 10 6438 1 2025-07-18 04:24:49.280 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:24:48.965 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:24:48.921 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:24:49.198 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:24:49.198 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:25:33.770 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6438 1 2025-07-18 04:26:34.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34552 10 6438 1 2025-07-18 04:21:58.270 00:06:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 04:27:34.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50458 10 6438 1 2025-07-18 04:28:34.977 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44686 10 6438 1 2025-07-18 04:23:58.272 00:06:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:29:35.385 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40286 10 6438 1 2025-07-18 04:29:49.360 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:29:49.256 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:29:49.140 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:29:49.363 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:29:49.222 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:30:35.797 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60278 10 6438 1 2025-07-18 04:31:36.199 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56376 10 6438 1 2025-07-18 04:32:36.599 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44688 10 6438 1 2025-07-18 04:33:37.007 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40286 10 6438 1 2025-07-18 04:28:58.271 00:06:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 04:34:49.749 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:34:37.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 10 6438 1 2025-07-18 04:34:49.667 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:34:49.407 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:34:49.666 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:34:49.593 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:35:37.807 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35112 10 6438 1 2025-07-18 04:30:58.274 00:06:00.659 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:36:38.213 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55860 10 6438 1 2025-07-18 04:37:38.609 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47102 10 6438 1 2025-07-18 04:38:39.015 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48042 10 6438 1 2025-07-18 04:39:49.643 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:39:49.051 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:39:49.409 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:39:49.406 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:39:39.376 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43518 10 6438 1 2025-07-18 04:39:49.493 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:40:39.757 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34222 10 6438 1 2025-07-18 04:35:58.276 00:06:00.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 04:41:40.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55216 10 6438 1 2025-07-18 04:42:40.573 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42656 10 6438 1 2025-07-18 04:37:58.278 00:06:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:43:40.981 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41314 10 6438 1 2025-07-18 04:44:49.651 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:44:49.247 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:44:49.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:44:49.661 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:44:49.651 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:44:41.355 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:48488 10 6438 1 2025-07-18 04:45:41.732 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50096 10 6438 1 2025-07-18 04:46:42.148 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35630 10 6438 1 2025-07-18 04:47:42.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48208 10 6438 1 2025-07-18 04:42:58.276 00:06:00.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 04:48:42.919 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60978 10 6438 1 2025-07-18 04:49:50.021 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:49:49.879 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:49:49.749 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:49:49.937 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:49:49.883 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:49:43.333 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:46026 10 6438 1 2025-07-18 04:44:58.278 00:06:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:50:43.707 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44490 12 6542 1 2025-07-18 04:51:44.120 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52318 10 6438 1 2025-07-18 04:52:44.527 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60736 10 6438 1 2025-07-18 04:53:44.888 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50770 12 6542 1 2025-07-18 04:54:49.935 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:54:49.703 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:54:49.822 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:54:49.851 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:54:49.855 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:54:45.308 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50078 10 6438 1 2025-07-18 04:49:58.276 00:06:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 04:55:45.721 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40432 10 6438 1 2025-07-18 04:51:58.280 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:56:46.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55780 10 6438 1 2025-07-18 04:57:46.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43862 10 6438 1 Summary: total flows: 137, total bytes: 414684, total packets: 1030, avg bps: 863, avg pps: 0, avg bpp: 402 Time window: 2025-07-18 03:53:58 - 2025-07-18 04:57:58 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0008s Wall: 0.0020s flows/second: 67658.0 Runtime: 0.0020s