Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-29 04:55:04.203 00:04:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 04:59:24.362 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42868 10 6452 1 2025-07-29 04:56:04.204 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:00:07.885 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:00:07.629 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:00:07.703 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:00:07.772 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:00:07.803 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:00:24.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43490 10 6452 1 2025-07-29 05:01:25.181 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41856 10 6452 1 2025-07-29 05:02:25.582 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49162 10 6452 1 2025-07-29 05:03:25.991 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49164 10 6452 1 2025-07-29 05:00:04.204 00:04:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:04:26.397 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38356 10 6452 1 2025-07-29 05:01:04.206 00:04:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:05:07.869 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:05:07.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:05:07.670 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:05:07.902 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:05:08.060 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:05:26.798 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59256 10 6452 1 2025-07-29 05:06:27.204 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45318 10 6452 1 2025-07-29 05:07:27.607 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33576 10 6452 1 2025-07-29 05:08:28.012 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48608 10 6452 1 2025-07-29 05:05:04.205 00:04:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:09:28.416 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48298 10 6452 1 2025-07-29 05:06:04.209 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:10:07.973 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:10:07.766 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:10:07.839 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:10:07.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:10:07.891 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:10:28.825 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48572 10 6452 1 2025-07-29 05:11:29.241 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56320 10 6452 1 2025-07-29 05:11:04.209 00:01:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-29 05:12:29.647 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44036 10 6452 1 2025-07-29 05:13:30.058 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35562 10 6452 1 2025-07-29 05:10:04.208 00:04:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:14:30.469 00:00:10.636 TCP 1.101.0.1:3000 -> 23.104.0.1:47746 10 6452 1 2025-07-29 05:15:08.055 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:15:07.849 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:15:07.870 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:15:07.974 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:15:07.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:15:31.145 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40360 10 6452 1 2025-07-29 05:16:31.547 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-07-29 05:13:04.209 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:17:31.940 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54944 10 6452 1 2025-07-29 05:18:32.367 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:33876 10 6452 1 2025-07-29 05:15:04.208 00:04:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:19:32.810 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37454 10 6452 1 2025-07-29 05:20:08.202 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:20:08.002 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:20:08.189 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:20:08.011 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:20:08.118 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:20:33.221 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47758 10 6452 1 2025-07-29 05:20:04.210 00:01:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-29 05:21:33.591 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44608 10 6452 1 2025-07-29 05:18:04.211 00:04:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:22:33.990 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46334 10 6452 1 2025-07-29 05:23:34.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51718 10 6452 1 2025-07-29 05:22:04.211 00:02:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-29 05:24:34.758 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56898 10 6452 1 2025-07-29 05:25:08.169 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:25:08.095 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:25:07.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:25:08.225 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:25:08.307 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:25:35.182 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37888 10 6452 1 2025-07-29 05:25:04.212 00:01:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-29 05:26:35.583 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35194 10 6452 1 2025-07-29 05:23:04.213 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:27:35.996 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52232 10 6452 1 2025-07-29 05:28:36.399 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54180 10 6452 1 2025-07-29 05:29:36.805 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41118 10 6452 1 2025-07-29 05:30:08.138 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:30:08.364 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:30:08.306 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:30:07.947 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:30:08.220 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:30:37.210 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46312 10 6452 1 2025-07-29 05:27:04.212 00:04:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:31:37.614 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53264 10 6452 1 2025-07-29 05:28:04.215 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:32:38.026 00:00:11.724 TCP 1.101.0.1:3000 -> 23.104.0.1:39872 10 6452 1 2025-07-29 05:33:39.791 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43374 10 6452 1 2025-07-29 05:34:40.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43446 10 6452 1 2025-07-29 05:35:08.441 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:35:08.350 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:35:08.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:35:08.016 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:35:08.360 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:35:40.548 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36904 10 6452 1 2025-07-29 05:32:04.213 00:04:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:36:40.952 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56774 10 6452 1 2025-07-29 05:33:04.216 00:04:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:37:41.355 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48568 10 6452 1 2025-07-29 05:38:41.715 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46870 10 6452 1 2025-07-29 05:39:42.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40224 10 6452 1 2025-07-29 05:40:08.831 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:40:08.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:40:08.677 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:40:08.632 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:40:08.750 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:40:42.515 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49018 10 6452 1 2025-07-29 05:37:04.215 00:04:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:41:42.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 10 6452 1 2025-07-29 05:38:04.223 00:04:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:42:43.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-07-29 05:43:43.715 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:41126 10 6452 1 2025-07-29 05:43:04.223 00:01:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-29 05:44:44.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43064 10 6452 1 2025-07-29 05:45:08.930 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:45:09.083 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:45:08.887 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:45:09.003 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:45:09.084 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:45:44.520 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36330 10 6452 1 2025-07-29 05:42:04.221 00:04:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:46:44.933 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 10 6452 1 2025-07-29 05:47:45.350 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57750 10 6452 1 2025-07-29 05:48:45.760 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:34726 10 6452 1 2025-07-29 05:45:04.223 00:04:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:49:46.177 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54930 10 6452 1 2025-07-29 05:50:08.801 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:50:08.664 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:50:08.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:50:08.702 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:50:08.719 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:50:46.582 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:56616 11 6504 1 2025-07-29 05:47:04.220 00:04:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 05:51:47.038 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41108 10 6452 1 2025-07-29 05:52:47.471 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45572 10 6452 1 2025-07-29 05:52:04.226 00:01:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-29 05:53:47.874 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43628 10 6452 1 2025-07-29 05:50:04.227 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:54:48.284 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35942 10 6452 1 2025-07-29 05:55:08.918 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 05:55:08.865 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 05:55:08.711 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:55:09.081 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 05:55:09.164 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 05:55:48.686 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55896 10 6452 1 2025-07-29 05:54:04.226 00:02:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-29 05:56:49.108 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 10 6452 1 2025-07-29 05:57:49.504 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43912 10 6452 1 2025-07-29 05:57:04.226 00:01:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 Summary: total flows: 148, total bytes: 410969, total packets: 1017, avg bps: 869, avg pps: 0, avg bpp: 404 Time window: 2025-07-29 04:55:04 - 2025-07-29 05:58:04 Total flows processed: 148, passed: 148, Blocks skipped: 0, Bytes read: 15456 Sys: 0.0018s User: 0.0027s Wall: 0.0022s flows/second: 66306.0 Runtime: 0.0022s