Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-21 21:54:00.414 00:06:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 21:59:38.133 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 10 6438 1 2025-07-21 22:00:38.555 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60668 10 6438 1 2025-07-21 21:56:00.417 00:06:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:01:36.988 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:01:37.078 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:01:37.168 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:01:37.132 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:01:37.070 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:01:38.961 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57496 10 6438 1 2025-07-21 22:02:39.366 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57876 10 6438 1 2025-07-21 22:03:39.771 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46250 10 6438 1 2025-07-21 22:04:40.182 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6438 1 2025-07-21 22:05:40.585 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6438 1 2025-07-21 22:01:00.415 00:06:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 22:06:37.441 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:06:37.307 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:06:37.275 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:06:37.406 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:06:37.490 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:06:40.988 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37648 10 6438 1 2025-07-21 22:07:41.351 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60098 10 6438 1 2025-07-21 22:03:00.417 00:06:00.488 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:08:41.753 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49938 10 6438 1 2025-07-21 22:09:42.171 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39466 10 6438 1 2025-07-21 22:10:42.577 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37266 10 6438 1 2025-07-21 22:11:37.341 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:11:37.505 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:11:37.262 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:11:37.293 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:11:37.258 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:11:42.978 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39764 10 6438 1 2025-07-21 22:12:43.392 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54126 10 6438 1 2025-07-21 22:08:00.415 00:06:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 22:13:43.797 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34946 10 6438 1 2025-07-21 22:14:44.203 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57198 10 6438 1 2025-07-21 22:10:00.420 00:06:00.488 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:15:44.603 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33958 10 6438 1 2025-07-21 22:16:37.444 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:16:37.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:16:37.360 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:16:37.239 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:16:37.362 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:16:45.008 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60170 10 6438 1 2025-07-21 22:17:45.409 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48296 10 6438 1 2025-07-21 22:18:45.776 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:43926 12 10350 1 2025-07-21 22:19:46.219 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58306 10 6438 1 2025-07-21 22:15:00.421 00:06:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 22:20:46.585 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37946 10 6438 1 2025-07-21 22:21:37.763 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:21:37.649 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:21:37.676 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:21:37.568 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:21:37.759 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:21:46.952 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35272 10 6438 1 2025-07-21 22:17:00.425 00:06:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:22:47.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58102 10 6438 1 2025-07-21 22:23:47.763 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53914 10 6438 1 2025-07-21 22:24:48.172 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:54232 11 6490 1 2025-07-21 22:25:48.630 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55812 10 6438 1 2025-07-21 22:26:37.697 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:26:37.617 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:26:37.624 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:26:37.705 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:26:37.780 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:26:49.035 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46620 10 6438 1 2025-07-21 22:22:00.425 00:06:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 22:27:49.434 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:35994 12 10352 1 2025-07-21 22:28:49.877 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60470 10 6438 1 2025-07-21 22:24:00.428 00:06:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:29:50.238 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34442 10 6438 1 2025-07-21 22:30:50.637 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58064 10 6438 1 2025-07-21 22:31:37.797 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:31:37.759 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:31:37.651 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:31:37.558 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:31:37.716 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:31:51.002 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59028 10 6438 1 2025-07-21 22:32:51.401 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49210 10 6438 1 2025-07-21 22:29:00.428 00:06:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 22:33:51.802 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49266 10 6438 1 2025-07-21 22:34:52.212 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34000 10 6438 1 2025-07-21 22:35:52.623 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50480 10 6438 1 2025-07-21 22:31:00.430 00:06:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:36:37.917 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:36:37.972 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:36:37.843 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:36:37.747 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:36:37.830 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:36:53.033 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56440 10 6438 1 2025-07-21 22:37:53.438 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41298 10 6438 1 2025-07-21 22:38:53.803 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52802 10 6438 1 2025-07-21 22:39:54.211 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58234 10 6438 1 2025-07-21 22:36:00.431 00:06:00.485 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 22:40:54.610 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58556 10 6438 1 2025-07-21 22:41:37.608 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:41:38.060 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:41:37.849 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:41:37.984 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:41:38.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:41:55.015 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57628 10 6438 1 2025-07-21 22:38:00.432 00:06:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:42:55.421 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:57606 10 6438 1 2025-07-21 22:43:55.847 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6438 1 2025-07-21 22:44:56.267 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47452 10 6438 1 2025-07-21 22:45:56.631 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6438 1 2025-07-21 22:46:37.897 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:46:38.054 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:46:37.893 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:46:37.959 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:46:38.042 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:46:57.034 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38762 10 6438 1 2025-07-21 22:43:00.429 00:06:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 22:47:57.438 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60198 10 6438 1 2025-07-21 22:48:57.838 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:54766 10 6438 1 2025-07-21 22:45:00.431 00:06:00.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:49:58.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60776 10 6438 1 2025-07-21 22:50:58.676 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33790 10 6438 1 2025-07-21 22:51:38.280 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:51:38.269 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:51:38.163 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:51:38.381 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:51:38.464 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:51:59.039 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46606 10 6438 1 2025-07-21 22:52:59.441 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57996 10 6438 1 2025-07-21 22:53:59.842 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:53394 10 6438 1 2025-07-21 22:50:00.433 00:06:00.512 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 22:55:00.272 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6438 1 2025-07-21 22:56:00.682 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56708 10 6438 1 2025-07-21 22:56:38.090 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 22:56:38.151 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 22:56:38.108 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:56:38.323 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 22:56:38.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 22:52:00.437 00:06:00.510 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 22:57:01.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37732 10 6438 1 2025-07-21 22:58:01.519 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33364 10 6438 1 Summary: total flows: 137, total bytes: 418338, total packets: 1027, avg bps: 868, avg pps: 0, avg bpp: 407 Time window: 2025-07-21 21:54:00 - 2025-07-21 22:58:11 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0018s User: 0.0018s Wall: 0.0020s flows/second: 68464.2 Runtime: 0.0020s