Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 01:54:57.631 00:05:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 01:58:55.980 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54984 10 6438 1 2025-07-17 01:59:17.478 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 01:59:17.059 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 01:59:17.469 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 01:59:17.422 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 01:59:17.551 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 01:59:56.357 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40092 10 6438 1 2025-07-17 01:56:57.631 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:00:56.770 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:32782 10 6438 1 2025-07-17 02:01:57.136 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6438 1 2025-07-17 02:02:57.500 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60610 10 6438 1 2025-07-17 02:03:57.902 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48020 12 6542 1 2025-07-17 02:04:17.716 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:04:17.637 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:04:17.636 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:04:17.427 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:04:17.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:00:57.634 00:05:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:04:58.312 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51566 10 6438 1 2025-07-17 02:05:58.723 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48782 10 6438 1 2025-07-17 02:02:57.631 00:05:00.665 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:06:59.143 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35092 10 6438 1 2025-07-17 02:07:59.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42334 10 6438 1 2025-07-17 02:08:59.949 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36858 10 6438 1 2025-07-17 02:09:17.648 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:09:17.566 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:09:17.480 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:09:17.572 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:09:17.655 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:10:00.318 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34384 10 6438 1 2025-07-17 02:06:57.634 00:05:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:11:00.721 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45464 10 6438 1 2025-07-17 02:12:01.142 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50516 10 6438 1 2025-07-17 02:08:57.634 00:05:00.665 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:13:01.548 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60134 10 6438 1 2025-07-17 02:14:01.950 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52582 10 6438 1 2025-07-17 02:14:17.858 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:14:17.696 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:14:17.806 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:14:17.919 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:14:18.001 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:15:02.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37996 10 6438 1 2025-07-17 02:16:02.724 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45974 10 6438 1 2025-07-17 02:12:57.638 00:05:00.659 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:17:03.135 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41226 10 6438 1 2025-07-17 02:18:03.549 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42812 10 6438 1 2025-07-17 02:14:57.636 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:19:03.913 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6438 1 2025-07-17 02:19:17.864 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:19:17.860 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:19:17.793 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:19:17.860 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:19:17.942 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:20:04.324 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:49376 10 6438 1 2025-07-17 02:21:04.770 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37920 11 6478 1 2025-07-17 02:22:05.137 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48566 10 6438 1 2025-07-17 02:18:57.639 00:05:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:23:05.541 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57204 10 6438 1 2025-07-17 02:24:17.869 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:24:17.866 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:24:17.785 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:24:17.554 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:24:05.943 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:45924 10 6438 1 2025-07-17 02:24:17.787 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:20:57.637 00:05:00.664 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:25:06.350 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52384 10 6438 1 2025-07-17 02:26:06.754 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59106 10 6438 1 2025-07-17 02:27:07.171 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34798 10 6438 1 2025-07-17 02:28:07.575 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40656 10 6438 1 2025-07-17 02:24:57.645 00:05:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:29:18.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:29:07.982 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59498 10 6438 1 2025-07-17 02:29:18.170 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:29:17.974 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:29:18.165 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:29:18.248 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:30:08.384 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 10 6438 1 2025-07-17 02:26:57.644 00:05:00.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:31:08.783 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40916 10 6438 1 2025-07-17 02:32:09.204 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41114 10 6438 1 2025-07-17 02:33:09.607 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42994 10 6438 1 2025-07-17 02:34:18.263 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:34:18.113 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:34:18.250 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:34:18.132 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:34:18.181 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:34:09.970 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56860 10 6438 1 2025-07-17 02:30:57.647 00:05:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:35:10.374 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37850 10 6438 1 2025-07-17 02:36:10.782 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60440 10 6438 1 2025-07-17 02:32:57.646 00:05:00.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:37:11.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57596 10 6438 1 2025-07-17 02:38:11.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55710 10 6438 1 2025-07-17 02:39:17.946 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:39:18.180 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:39:18.009 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:39:18.306 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:39:18.389 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:39:11.998 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:45864 10 6438 1 2025-07-17 02:40:12.401 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36518 10 6438 1 2025-07-17 02:36:57.655 00:05:00.648 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:41:12.808 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51116 10 6438 1 2025-07-17 02:42:13.212 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41796 10 6438 1 2025-07-17 02:38:57.652 00:05:00.655 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:43:13.617 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:52960 13 13924 1 2025-07-17 02:44:18.571 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:44:18.368 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:44:18.545 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:44:18.503 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:44:18.490 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:44:14.112 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49682 10 6438 1 2025-07-17 02:45:14.467 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33248 10 6438 1 2025-07-17 02:46:14.877 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6438 1 2025-07-17 02:42:57.660 00:05:00.647 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:47:15.239 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54708 10 6438 1 2025-07-17 02:48:15.646 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46508 10 6438 1 2025-07-17 02:44:57.660 00:05:00.650 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:49:18.520 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:49:18.528 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:49:18.486 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:49:18.281 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:49:18.437 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:49:16.006 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47468 10 6438 1 2025-07-17 02:50:16.378 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:51300 10 6438 1 2025-07-17 02:51:16.822 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51204 10 6438 1 2025-07-17 02:52:17.223 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35012 10 6438 1 2025-07-17 02:48:57.664 00:05:00.644 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 02:53:17.631 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38696 10 6438 1 2025-07-17 02:54:18.425 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 02:54:18.560 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 02:54:18.488 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:54:18.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 02:54:18.526 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 02:54:18.035 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57432 10 6438 1 2025-07-17 02:50:57.662 00:05:00.649 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 02:55:18.444 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58700 10 6438 1 2025-07-17 02:56:18.847 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:37976 10 6438 1 2025-07-17 02:57:19.229 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59692 10 6438 1 2025-07-17 02:58:19.589 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59726 10 6438 1 Summary: total flows: 140, total bytes: 423790, total packets: 1026, avg bps: 889, avg pps: 0, avg bpp: 413 Time window: 2025-07-17 01:54:57 - 2025-07-17 02:58:29 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0028s User: 0.0019s Wall: 0.0021s flows/second: 67178.0 Runtime: 0.0021s