Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 01:57:59.306 00:01:00.632 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 01:58:58.403 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:56278 10 6438 1 2025-07-20 01:59:58.760 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35790 10 6438 1 2025-07-20 02:00:44.186 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:00:44.209 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:00:44.104 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:00:44.195 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:00:44.295 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 01:56:59.309 00:04:00.626 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-20 02:00:59.169 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33606 10 6438 1 2025-07-20 01:59:59.307 00:02:00.632 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-20 02:01:59.534 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33978 10 6438 1 2025-07-20 02:01:59.311 00:01:00.626 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:02:59.894 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52364 10 6438 1 2025-07-20 02:02:59.308 00:01:00.630 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 02:04:00.309 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38298 10 6438 1 2025-07-20 02:05:00.711 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44382 10 6438 1 2025-07-20 02:05:44.187 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:05:44.120 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:05:43.985 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:05:44.198 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:05:44.281 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:03:59.311 00:02:00.625 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-20 02:06:01.117 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41550 10 6438 1 2025-07-20 02:04:59.308 00:02:00.630 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-20 02:07:01.481 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42330 10 6438 1 2025-07-20 02:06:59.313 00:01:00.624 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:08:01.885 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49090 10 6438 1 2025-07-20 02:07:59.310 00:01:00.630 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 02:09:02.250 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49614 10 6438 1 2025-07-20 02:10:02.668 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49292 10 6438 1 2025-07-20 02:10:44.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:10:44.378 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:10:44.294 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:10:44.387 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:10:44.470 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:08:59.316 00:02:00.621 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-20 02:11:03.098 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40092 10 6438 1 2025-07-20 02:12:03.484 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39092 10 6438 1 2025-07-20 02:11:59.319 00:01:00.618 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:13:03.885 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:38304 12 10352 1 2025-07-20 02:09:59.314 00:04:00.626 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-20 02:14:04.361 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42506 10 6438 1 2025-07-20 02:15:04.740 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33304 10 6438 1 2025-07-20 02:15:44.652 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:15:44.467 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:15:44.560 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:15:44.341 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:15:44.569 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:13:59.325 00:02:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-20 02:16:05.150 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49370 10 6438 1 2025-07-20 02:17:05.571 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50078 10 6438 1 2025-07-20 02:16:59.327 00:01:00.612 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:18:05.975 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39426 10 6438 1 2025-07-20 02:14:59.323 00:04:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-20 02:19:06.381 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42488 10 6438 1 2025-07-20 02:20:06.792 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44642 10 6438 1 2025-07-20 02:20:44.415 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:20:44.288 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:20:44.503 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:20:44.482 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:20:44.566 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:18:59.327 00:02:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-20 02:21:07.192 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58854 10 6438 1 2025-07-20 02:22:07.592 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6438 1 2025-07-20 02:21:59.327 00:01:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:23:08.002 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34986 10 6438 1 2025-07-20 02:19:59.325 00:04:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-20 02:24:08.404 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43804 10 6438 1 2025-07-20 02:25:08.814 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37378 10 6438 1 2025-07-20 02:25:44.300 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:25:44.527 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:25:44.544 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:25:44.640 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:25:44.383 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:24:59.326 00:01:00.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 02:26:09.222 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57720 10 6438 1 2025-07-20 02:27:09.630 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37484 10 6438 1 2025-07-20 02:23:59.329 00:04:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-20 02:28:10.033 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58552 10 6438 1 2025-07-20 02:26:59.326 00:02:00.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-20 02:29:10.438 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44010 10 6438 1 2025-07-20 02:30:10.847 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43348 10 6438 1 2025-07-20 02:30:44.682 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:30:44.536 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:30:44.520 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:30:44.653 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:30:44.764 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:29:59.328 00:01:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 02:31:11.269 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56592 10 6438 1 2025-07-20 02:32:11.677 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39768 10 6438 1 2025-07-20 02:28:59.329 00:04:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-20 02:33:12.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40984 10 6438 1 2025-07-20 02:31:59.329 00:02:00.620 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-20 02:34:12.514 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43434 10 6438 1 2025-07-20 02:35:12.924 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58580 10 6438 1 2025-07-20 02:35:44.774 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:35:44.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:35:44.838 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:35:44.921 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:35:44.979 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:34:59.332 00:01:00.614 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 02:36:13.295 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35006 10 6438 1 2025-07-20 02:37:13.700 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52416 10 6438 1 2025-07-20 02:33:59.334 00:04:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-20 02:38:14.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33588 10 6438 1 2025-07-20 02:36:59.331 00:02:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-20 02:39:14.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58486 10 6438 1 2025-07-20 02:38:59.334 00:01:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:40:14.919 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39424 10 6438 1 2025-07-20 02:40:44.752 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:40:44.652 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:40:44.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:40:44.984 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:40:44.989 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:39:59.331 00:01:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 02:41:15.329 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48534 10 6438 1 2025-07-20 02:42:15.710 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6438 1 2025-07-20 02:40:59.335 00:02:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-20 02:43:16.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35838 10 6438 1 2025-07-20 02:44:16.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6438 1 2025-07-20 02:43:59.335 00:01:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:45:16.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47468 10 6438 1 2025-07-20 02:45:44.943 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:45:44.945 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:45:44.594 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:45:44.944 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:45:45.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:41:59.331 00:04:00.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-20 02:46:17.321 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46064 10 6438 1 2025-07-20 02:47:17.725 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45220 10 6438 1 2025-07-20 02:45:59.337 00:02:00.612 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-20 02:48:18.139 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56272 10 6438 1 2025-07-20 02:49:18.538 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6438 1 2025-07-20 02:48:59.338 00:01:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:50:18.950 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 10 6438 1 2025-07-20 02:50:44.919 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:50:45.008 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:50:45.051 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:50:45.213 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:50:45.296 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:46:59.334 00:04:00.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-20 02:51:19.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6438 1 2025-07-20 02:52:19.730 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43300 10 6438 1 2025-07-20 02:50:59.338 00:02:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-20 02:51:59.336 00:01:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 02:53:20.142 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 10 6438 1 2025-07-20 02:54:20.544 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58916 10 6438 1 2025-07-20 02:53:59.338 00:01:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-20 02:55:20.945 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48328 10 6438 1 2025-07-20 02:55:45.212 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:55:45.262 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:55:45.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:55:45.130 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:55:45.213 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:53:59.335 00:02:00.620 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-20 02:56:21.358 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35482 10 6438 1 2025-07-20 02:57:21.753 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38042 10 6438 1 2025-07-20 02:56:59.337 00:01:00.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-20 02:55:59.339 00:02:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-20 02:58:22.168 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40890 10 6438 1 Summary: total flows: 161, total bytes: 420443, total packets: 1028, avg bps: 910, avg pps: 0, avg bpp: 408 Time window: 2025-07-20 01:56:59 - 2025-07-20 02:58:32 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0019s User: 0.0019s Wall: 0.0021s flows/second: 77743.8 Runtime: 0.0021s