Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-19 03:54:58.768 00:05:00.676 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:59:02.637 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43856 10 6438 1 2025-07-19 04:00:03.057 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43854 10 6438 1 2025-07-19 04:00:17.561 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:00:18.098 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:00:18.130 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:00:17.866 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:00:17.644 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:01:03.473 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6438 1 2025-07-19 04:02:03.873 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45602 10 6438 1 2025-07-19 04:03:04.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50124 10 6438 1 2025-07-19 03:59:58.771 00:05:00.671 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:04:04.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51928 10 6438 1 2025-07-19 04:00:58.774 00:05:00.671 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:05:17.616 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:05:17.829 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:05:17.623 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:05:17.646 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:05:05.108 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56550 10 6438 1 2025-07-19 04:05:17.699 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:06:05.523 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59974 10 6438 1 2025-07-19 04:07:05.925 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53584 10 6438 1 2025-07-19 04:08:06.345 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:52406 12 10352 1 2025-07-19 04:09:06.824 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53956 10 6438 1 2025-07-19 04:05:58.780 00:05:00.665 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:10:18.076 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:10:17.785 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:10:17.648 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:10:07.190 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37158 10 6438 1 2025-07-19 04:10:18.096 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:10:18.179 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:06:58.776 00:05:00.670 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:11:07.590 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37340 10 6438 1 2025-07-19 04:12:07.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46974 10 6438 1 2025-07-19 04:13:08.398 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:55434 12 10352 1 2025-07-19 04:14:08.876 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59256 10 6438 1 2025-07-19 04:15:17.788 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:15:17.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:15:17.873 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:15:17.812 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:15:09.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 10 6438 1 2025-07-19 04:15:17.705 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:11:58.783 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:16:09.681 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46182 10 6438 1 2025-07-19 04:12:58.780 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:17:10.051 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6438 1 2025-07-19 04:18:10.462 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36538 10 6438 1 2025-07-19 04:19:10.830 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33338 10 6438 1 2025-07-19 04:20:18.057 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:20:17.804 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:20:17.880 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:20:17.924 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:20:17.974 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:20:11.230 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35330 10 6438 1 2025-07-19 04:21:11.594 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6438 1 2025-07-19 04:17:58.784 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:22:11.996 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43472 10 6438 1 2025-07-19 04:18:58.781 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:23:12.401 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43038 10 6438 1 2025-07-19 04:24:12.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45466 10 6438 1 2025-07-19 04:25:18.150 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:25:17.924 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:25:17.953 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:25:18.097 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:25:18.180 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:25:13.210 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56458 10 6438 1 2025-07-19 04:26:13.608 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39048 10 6438 1 2025-07-19 04:27:14.013 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38178 10 6438 1 2025-07-19 04:23:58.785 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:28:14.411 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:45246 12 10352 1 2025-07-19 04:24:58.783 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:29:14.889 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:49354 10 6438 1 2025-07-19 04:30:18.321 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:30:18.063 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:30:18.037 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:30:18.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:30:18.238 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:30:15.276 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41704 10 6438 1 2025-07-19 04:31:15.700 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59624 10 6438 1 2025-07-19 04:32:16.112 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50198 10 6438 1 2025-07-19 04:33:16.511 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41154 10 6438 1 2025-07-19 04:29:58.788 00:05:00.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:34:16.872 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43326 10 6438 1 2025-07-19 04:30:58.786 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:35:18.394 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:35:18.208 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:35:18.386 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:35:18.292 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:35:18.470 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:35:17.276 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40094 10 6438 1 2025-07-19 04:36:17.642 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44492 10 6438 1 2025-07-19 04:37:18.057 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40368 10 6438 1 2025-07-19 04:38:18.419 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58888 10 6438 1 2025-07-19 04:39:18.784 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46646 10 6438 1 2025-07-19 04:35:58.788 00:05:00.665 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:40:18.483 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:40:18.508 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:40:18.544 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:40:18.389 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:40:18.626 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:40:19.189 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51694 10 6438 1 2025-07-19 04:36:58.787 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:41:19.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39518 10 6438 1 2025-07-19 04:42:19.990 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42082 10 6438 1 2025-07-19 04:43:20.400 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35296 10 6438 1 2025-07-19 04:44:20.809 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48000 10 6438 1 2025-07-19 04:45:18.477 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:45:18.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:45:18.383 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:45:18.568 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:45:18.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:45:21.216 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58060 10 6438 1 2025-07-19 04:41:58.791 00:05:00.664 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:46:21.616 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40274 10 6438 1 2025-07-19 04:42:58.789 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:47:22.019 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6438 1 2025-07-19 04:48:22.422 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42078 10 6438 1 2025-07-19 04:49:22.828 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39620 10 6438 1 2025-07-19 04:50:18.729 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:50:18.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:50:18.766 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:50:18.487 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:50:18.646 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:50:23.260 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39250 10 6438 1 2025-07-19 04:51:23.676 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47356 10 6438 1 2025-07-19 04:47:58.792 00:05:00.670 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:52:24.101 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43754 10 6438 1 2025-07-19 04:48:58.790 00:05:00.675 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 04:53:24.518 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51840 10 6438 1 2025-07-19 04:54:24.883 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34136 12 6542 1 2025-07-19 04:55:18.796 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 04:55:18.635 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 04:55:18.635 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 04:55:18.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:55:18.716 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 04:55:25.293 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49002 10 6438 1 2025-07-19 04:56:25.689 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37766 10 6438 1 2025-07-19 04:57:26.111 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50448 10 6438 1 2025-07-19 04:53:58.796 00:05:00.669 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 04:58:26.513 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37362 10 6438 1 Summary: total flows: 140, total bytes: 428006, total packets: 1028, avg bps: 891, avg pps: 0, avg bpp: 416 Time window: 2025-07-19 03:54:58 - 2025-07-19 04:58:59 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0010s User: 0.0029s Wall: 0.0020s flows/second: 69930.0 Runtime: 0.0020s