Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-16 20:54:57.506 00:05:00.649 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 20:58:55.750 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45756 10 6438 1 2025-07-16 20:59:11.493 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 20:59:11.410 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 20:59:11.228 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 20:59:11.500 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 20:59:11.410 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 20:59:56.147 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57884 10 6438 1 2025-07-16 20:56:57.502 00:05:00.654 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:00:56.569 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 10 6438 1 2025-07-16 21:01:56.974 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57312 10 6438 1 2025-07-16 21:02:57.378 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:33532 12 10350 1 2025-07-16 21:03:57.811 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34438 10 6438 1 2025-07-16 21:04:11.574 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:04:11.482 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:04:11.629 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:04:11.442 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:04:11.491 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:00:57.505 00:05:00.649 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:04:58.179 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:43142 10 6438 1 2025-07-16 21:05:58.611 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49450 10 6438 1 2025-07-16 21:02:57.503 00:05:00.654 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:06:59.017 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35686 10 6438 1 2025-07-16 21:07:59.431 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43442 10 6438 1 2025-07-16 21:09:11.847 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:09:11.442 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:09:11.540 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:09:11.634 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:09:11.765 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:08:59.839 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:56000 10 6438 1 2025-07-16 21:10:00.270 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49208 10 6438 1 2025-07-16 21:06:57.505 00:05:00.650 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:11:00.674 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48062 10 6438 1 2025-07-16 21:12:01.113 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54944 10 6438 1 2025-07-16 21:08:57.504 00:05:00.654 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:13:01.474 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60534 10 6438 1 2025-07-16 21:14:11.509 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:14:11.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:14:01.880 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38524 10 6438 1 2025-07-16 21:14:11.789 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:14:11.785 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:14:11.427 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:15:02.295 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48944 10 6438 1 2025-07-16 21:16:02.696 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54852 10 6438 1 2025-07-16 21:12:57.506 00:05:00.652 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:17:03.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45402 10 6438 1 2025-07-16 21:18:03.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49026 10 6438 1 2025-07-16 21:14:57.505 00:05:00.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:19:11.861 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:19:03.921 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41174 10 6438 1 2025-07-16 21:19:11.741 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:19:11.830 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:19:11.868 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:19:11.951 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:20:04.336 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60104 10 6438 1 2025-07-16 21:21:04.748 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51712 10 6438 1 2025-07-16 21:22:05.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47648 10 6438 1 2025-07-16 21:18:57.508 00:05:00.654 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:23:05.553 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47820 10 6438 1 2025-07-16 21:24:12.074 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:24:12.197 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:24:11.895 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:24:11.981 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:24:12.065 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:24:05.952 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59188 10 6438 1 2025-07-16 21:20:57.506 00:05:00.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:25:06.362 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40572 10 6438 1 2025-07-16 21:26:06.770 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 10 6438 1 2025-07-16 21:27:07.182 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38762 10 6438 1 2025-07-16 21:28:07.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51452 10 6438 1 2025-07-16 21:24:57.510 00:05:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:29:12.219 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:29:11.834 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:29:12.215 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:29:11.905 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:29:12.136 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:29:07.948 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6438 1 2025-07-16 21:30:08.352 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53876 10 6438 1 2025-07-16 21:26:57.507 00:05:00.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:31:08.760 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37038 10 6438 1 2025-07-16 21:32:09.176 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:56970 10 6438 1 2025-07-16 21:33:09.558 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36956 10 6438 1 2025-07-16 21:34:12.619 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:34:12.468 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:34:12.466 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:34:12.348 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:34:12.538 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:34:09.975 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47016 10 6438 1 2025-07-16 21:30:57.510 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:35:10.382 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55824 10 6438 1 2025-07-16 21:36:10.781 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54134 10 6438 1 2025-07-16 21:32:57.509 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:37:11.190 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45126 10 6438 1 2025-07-16 21:38:11.591 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40694 10 6438 1 2025-07-16 21:39:12.077 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:39:12.103 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:39:11.989 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:39:12.129 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:39:11.994 00:00:00.048 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:39:11.998 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42930 10 6438 1 2025-07-16 21:40:12.397 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49110 10 6438 1 2025-07-16 21:36:57.511 00:05:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:41:12.801 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47954 10 6438 1 2025-07-16 21:42:13.206 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33824 10 6438 1 2025-07-16 21:38:57.509 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:43:13.605 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:35376 12 10352 1 2025-07-16 21:44:12.449 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:44:12.365 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:44:12.379 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:44:12.070 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:44:12.153 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:44:14.109 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34612 10 6438 1 2025-07-16 21:45:14.514 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42316 10 6438 1 2025-07-16 21:46:14.939 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57128 10 6438 1 2025-07-16 21:42:57.512 00:05:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:47:15.352 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54538 10 6438 1 2025-07-16 21:48:15.758 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38562 10 6438 1 2025-07-16 21:44:57.509 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:49:12.334 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:49:12.340 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:49:12.427 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:49:12.456 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:49:12.539 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:49:16.184 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53270 10 6438 1 2025-07-16 21:50:16.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45512 10 6438 1 2025-07-16 21:51:16.962 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51274 10 6438 1 2025-07-16 21:52:17.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50064 10 6438 1 2025-07-16 21:48:57.514 00:05:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-16 21:53:17.765 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:45244 12 10352 1 2025-07-16 21:54:12.697 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 21:54:12.828 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 21:54:12.685 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 21:54:12.457 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:54:12.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 21:54:18.259 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:48168 10 6438 1 2025-07-16 21:50:57.512 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-16 21:55:18.617 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57162 10 6438 1 2025-07-16 21:56:18.982 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37268 10 6438 1 2025-07-16 21:57:19.349 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53066 10 6438 1 2025-07-16 21:58:19.754 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53220 10 6438 1 Summary: total flows: 140, total bytes: 427900, total packets: 1026, avg bps: 897, avg pps: 0, avg bpp: 417 Time window: 2025-07-16 20:54:57 - 2025-07-16 21:58:30 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0018s User: 0.0018s Wall: 0.0021s flows/second: 68026.2 Runtime: 0.0021s