Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-19 02:54:58.745 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 02:59:38.568 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52000 10 6438 1 2025-07-19 03:00:16.715 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:00:16.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:00:16.632 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:00:16.578 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:00:16.509 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:00:38.974 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36042 10 6438 1 2025-07-19 03:01:39.376 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49780 10 6438 1 2025-07-19 02:57:58.749 00:05:00.670 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:02:39.782 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6438 1 2025-07-19 03:03:40.188 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41184 10 6438 1 2025-07-19 03:04:40.595 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35540 10 6438 1 2025-07-19 03:00:58.749 00:05:00.674 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:05:16.640 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:05:16.946 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:05:16.568 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:05:16.559 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:05:16.559 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:05:40.997 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47898 10 6438 1 2025-07-19 03:06:41.359 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51594 10 6438 1 2025-07-19 03:07:41.731 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55898 10 6438 1 2025-07-19 03:03:58.750 00:05:00.670 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:08:42.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36216 10 6438 1 2025-07-19 03:09:42.512 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51362 10 6438 1 2025-07-19 03:10:16.803 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:10:16.549 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:10:16.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:10:16.720 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:10:16.757 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:10:42.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51010 10 6438 1 2025-07-19 03:06:58.747 00:05:00.676 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:11:43.330 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34566 10 6438 1 2025-07-19 03:12:43.692 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45222 10 6438 1 2025-07-19 03:13:44.103 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:55228 12 10352 1 2025-07-19 03:09:58.750 00:05:00.671 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:14:44.583 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:39630 11 6490 1 2025-07-19 03:15:16.799 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:15:16.716 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:15:16.794 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:15:16.716 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:15:16.835 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:15:45.041 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43046 10 6438 1 2025-07-19 03:16:45.444 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39058 10 6438 1 2025-07-19 03:12:58.750 00:05:00.675 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:17:45.843 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:59532 10 6438 1 2025-07-19 03:18:46.223 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52472 10 6438 1 2025-07-19 03:19:46.625 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34252 10 6438 1 2025-07-19 03:15:58.753 00:05:00.670 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:20:17.203 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:20:16.835 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:20:16.827 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:20:17.120 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:20:17.123 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:20:47.026 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:47714 10 6438 1 2025-07-19 03:21:47.402 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39124 10 6438 1 2025-07-19 03:22:47.802 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58854 10 6438 1 2025-07-19 03:18:58.753 00:05:00.677 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:23:48.221 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33478 10 6438 1 2025-07-19 03:24:48.622 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:49660 11 6490 1 2025-07-19 03:25:16.946 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:25:16.872 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:25:17.075 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:25:17.041 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:25:17.158 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:21:58.756 00:05:00.673 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:25:49.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32890 10 6438 1 2025-07-19 03:26:49.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55620 10 6438 1 2025-07-19 03:27:49.928 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:37332 12 10350 1 2025-07-19 03:28:50.420 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52040 10 6438 1 2025-07-19 03:24:58.755 00:05:00.678 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:29:50.827 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36196 10 6438 1 2025-07-19 03:30:17.525 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:30:17.265 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:30:17.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:30:17.443 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:30:17.331 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:30:51.239 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45912 10 6438 1 2025-07-19 03:27:58.756 00:05:00.674 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:31:51.643 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:60028 10 6438 1 2025-07-19 03:32:52.036 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:58994 12 10352 1 2025-07-19 03:33:52.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6438 1 2025-07-19 03:30:58.759 00:05:00.675 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:34:52.918 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54460 10 6438 1 2025-07-19 03:35:17.157 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:35:17.087 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:35:17.267 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:35:17.219 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:35:17.351 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:35:53.328 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46044 10 6438 1 2025-07-19 03:36:53.732 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41452 10 6438 1 2025-07-19 03:33:58.761 00:05:00.671 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:37:54.134 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58948 10 6438 1 2025-07-19 03:38:54.540 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57250 10 6438 1 2025-07-19 03:39:54.899 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41866 12 6542 1 2025-07-19 03:40:17.092 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:40:17.139 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:40:17.171 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:40:17.010 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:40:17.134 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:36:58.763 00:05:00.673 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:40:55.310 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52964 10 6438 1 2025-07-19 03:41:55.709 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33338 10 6438 1 2025-07-19 03:42:56.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 10 6438 1 2025-07-19 03:39:58.765 00:05:00.668 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:43:56.528 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58876 10 6438 1 2025-07-19 03:44:56.936 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:41620 13 6594 1 2025-07-19 03:45:17.533 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:45:17.423 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:45:17.487 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:45:17.121 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:45:17.616 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:45:57.399 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46030 10 6438 1 2025-07-19 03:42:58.765 00:05:00.677 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:46:57.804 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:57400 10 6438 1 2025-07-19 03:47:58.231 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:36352 10 6438 1 2025-07-19 03:48:58.604 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33506 10 6438 1 2025-07-19 03:45:58.767 00:05:00.671 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:49:59.009 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49842 10 6438 1 2025-07-19 03:50:17.621 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:50:17.475 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:50:17.471 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:50:17.538 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:50:17.602 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:50:59.364 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53966 10 6438 1 2025-07-19 03:51:59.765 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52662 10 6438 1 2025-07-19 03:48:58.766 00:05:00.675 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 03:53:00.137 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47328 10 6438 1 2025-07-19 03:54:00.542 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54252 10 6438 1 2025-07-19 03:55:17.641 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 03:55:00.936 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:46934 10 6438 1 2025-07-19 03:55:17.557 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 03:55:17.205 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:55:17.557 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 03:55:17.557 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 03:51:58.770 00:05:00.671 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 03:56:01.356 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:39006 10 6438 1 2025-07-19 03:57:01.847 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:36288 10 6438 1 2025-07-19 03:58:02.274 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52390 10 6438 1 Summary: total flows: 139, total bytes: 421826, total packets: 1023, avg bps: 889, avg pps: 0, avg bpp: 412 Time window: 2025-07-19 02:54:58 - 2025-07-19 03:58:12 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0021s User: 0.0021s Wall: 0.0020s flows/second: 71168.0 Runtime: 0.0020s