Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 05:54:57.735 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 05:59:22.533 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 05:59:22.645 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 05:59:22.406 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 05:59:22.526 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 05:59:22.609 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 05:59:31.903 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50862 12 6542 1 2025-07-17 06:00:32.322 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 10 6438 1 2025-07-17 05:56:57.733 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:01:32.716 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50466 10 6438 1 2025-07-17 06:02:33.122 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46518 10 6438 1 2025-07-17 06:03:33.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56004 10 6438 1 2025-07-17 06:04:22.459 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:04:22.491 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:04:22.010 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:04:22.320 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:04:22.408 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:04:33.928 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 10 6438 1 2025-07-17 06:00:57.737 00:05:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:05:34.346 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39326 10 6438 1 2025-07-17 06:06:34.750 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34984 10 6438 1 2025-07-17 06:02:57.736 00:05:00.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:07:35.153 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51102 10 6438 1 2025-07-17 06:08:35.509 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52280 10 6438 1 2025-07-17 06:09:22.583 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:09:22.361 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:09:22.473 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:09:22.397 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:09:22.502 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:09:35.930 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58188 10 6438 1 2025-07-17 06:10:36.309 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:59594 10 6438 1 2025-07-17 06:06:57.739 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:11:36.690 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57028 10 6438 1 2025-07-17 06:12:37.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36798 10 6438 1 2025-07-17 06:08:57.737 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:13:37.515 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6438 1 2025-07-17 06:14:23.115 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:14:23.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:14:22.678 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:14:23.117 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:14:23.199 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:14:37.957 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41228 10 6438 1 2025-07-17 06:15:38.363 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:43548 10 6438 1 2025-07-17 06:16:38.716 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33272 10 6438 1 2025-07-17 06:12:57.740 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:17:39.129 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51956 10 6438 1 2025-07-17 06:18:39.531 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36648 10 6438 1 2025-07-17 06:14:57.738 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:19:22.612 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:19:22.386 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:19:22.720 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:19:22.560 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:19:22.802 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:19:39.896 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57408 10 6438 1 2025-07-17 06:20:40.316 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6438 1 2025-07-17 06:21:40.715 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46246 10 6438 1 2025-07-17 06:22:41.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57110 10 6438 1 2025-07-17 06:18:57.740 00:05:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:23:41.519 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:39826 12 10352 1 2025-07-17 06:24:22.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:24:22.822 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:24:22.609 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:24:22.786 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:24:22.868 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:24:41.993 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42032 10 6438 1 2025-07-17 06:20:57.738 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:25:42.360 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58562 10 6438 1 2025-07-17 06:26:42.718 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40324 10 6438 1 2025-07-17 06:27:43.140 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36666 10 6438 1 2025-07-17 06:28:43.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36136 10 6438 1 2025-07-17 06:24:57.750 00:05:00.650 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:29:23.034 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:29:22.997 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:29:23.084 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:29:22.669 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:29:22.951 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:29:43.953 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58384 10 6438 1 2025-07-17 06:30:44.400 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52318 10 6438 1 2025-07-17 06:26:57.749 00:05:00.654 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:31:44.807 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35828 10 6438 1 2025-07-17 06:32:45.218 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 10 6438 1 2025-07-17 06:33:45.623 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6438 1 2025-07-17 06:34:22.979 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:34:22.898 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:34:22.647 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:34:22.927 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:34:22.896 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:30:57.754 00:05:00.647 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:34:46.029 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6438 1 2025-07-17 06:35:46.431 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60952 10 6438 1 2025-07-17 06:32:57.752 00:05:00.656 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:36:46.842 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6438 1 2025-07-17 06:37:47.260 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53402 10 6438 1 2025-07-17 06:38:47.668 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43988 10 6438 1 2025-07-17 06:39:23.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:39:23.062 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:39:23.062 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:39:22.946 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:39:22.951 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:39:48.100 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44220 10 6438 1 2025-07-17 06:36:57.756 00:05:00.650 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:40:48.509 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:38224 11 6490 1 2025-07-17 06:41:48.963 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51484 10 6438 1 2025-07-17 06:38:57.753 00:05:00.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:42:49.376 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60164 10 6438 1 2025-07-17 06:43:49.786 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50888 10 6438 1 2025-07-17 06:44:23.276 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:44:23.237 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:44:23.195 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:44:22.927 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:44:23.195 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:44:50.149 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39336 10 6438 1 2025-07-17 06:45:50.561 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 10 6438 1 2025-07-17 06:42:57.758 00:05:00.650 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:46:50.963 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35148 10 6438 1 2025-07-17 06:47:51.373 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41364 10 6438 1 2025-07-17 06:44:57.756 00:05:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:48:51.745 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41150 10 6438 1 2025-07-17 06:49:23.447 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:49:23.196 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:49:23.275 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:49:23.135 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:49:23.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:49:52.151 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53532 10 6438 1 2025-07-17 06:50:52.560 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6438 1 2025-07-17 06:51:52.967 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40756 10 6438 1 2025-07-17 06:48:57.759 00:05:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:52:53.374 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59804 10 6438 1 2025-07-17 06:53:53.776 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45848 10 6438 1 2025-07-17 06:54:23.503 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:54:23.369 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:54:23.308 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:54:23.105 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:54:23.421 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:50:57.757 00:05:00.665 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 06:54:54.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47486 10 6438 1 2025-07-17 06:55:54.588 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45596 10 6438 1 2025-07-17 06:56:54.991 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6438 1 2025-07-17 06:57:55.398 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54444 10 6438 1 Summary: total flows: 139, total bytes: 413792, total packets: 1015, avg bps: 873, avg pps: 0, avg bpp: 407 Time window: 2025-07-17 05:54:57 - 2025-07-17 06:58:05 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0009s User: 0.0028s Wall: 0.0023s flows/second: 61099.2 Runtime: 0.0023s