Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 04:53:58.279 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 04:58:46.944 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54616 10 6438 1 2025-07-18 04:59:49.746 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 04:59:49.834 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 04:59:49.833 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:59:49.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 04:59:49.973 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 04:59:47.311 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56138 10 6438 1 2025-07-18 05:00:47.733 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 12 6542 1 2025-07-18 05:01:48.147 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33644 10 6438 1 2025-07-18 04:56:58.279 00:06:00.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:02:48.552 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:41102 12 10350 1 2025-07-18 05:03:49.025 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60196 10 6438 1 2025-07-18 05:04:49.899 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:04:49.966 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:04:49.896 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:04:49.979 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:04:49.981 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:04:49.423 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39940 10 6438 1 2025-07-18 05:00:58.283 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 05:05:49.825 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34284 10 6438 1 2025-07-18 05:06:50.228 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53252 10 6438 1 2025-07-18 05:07:50.634 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6438 1 2025-07-18 05:03:58.280 00:06:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:08:51.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41380 10 6438 1 2025-07-18 05:09:49.899 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:09:49.898 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:09:50.186 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:09:50.166 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:09:50.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:09:51.439 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58562 10 6438 1 2025-07-18 05:10:51.846 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35158 10 6438 1 2025-07-18 05:11:52.266 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34136 10 6438 1 2025-07-18 05:07:58.284 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 05:12:52.627 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58266 10 6438 1 2025-07-18 05:13:53.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38394 10 6438 1 2025-07-18 05:14:49.975 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:14:49.984 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:14:50.207 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:14:50.112 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:14:50.196 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:14:53.432 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50056 10 6438 1 2025-07-18 05:10:58.283 00:06:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:15:53.798 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47236 10 6438 1 2025-07-18 05:16:54.165 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42904 10 6438 1 2025-07-18 05:17:54.563 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50776 10 6438 1 2025-07-18 05:18:54.966 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50000 10 6438 1 2025-07-18 05:19:50.619 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:19:50.368 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:19:50.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:19:50.174 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:19:50.536 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:14:58.285 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 05:19:55.369 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35186 10 6438 1 2025-07-18 05:20:55.782 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43778 10 6438 1 2025-07-18 05:21:56.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6438 1 2025-07-18 05:17:58.283 00:06:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:22:56.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 10 6438 1 2025-07-18 05:23:56.989 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6438 1 2025-07-18 05:24:50.486 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:24:50.358 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:24:50.329 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:24:50.442 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:24:50.413 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:24:57.392 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51144 10 6438 1 2025-07-18 05:25:57.796 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56348 10 6438 1 2025-07-18 05:21:58.287 00:06:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 05:26:58.205 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39076 10 6438 1 2025-07-18 05:27:58.601 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34504 10 6438 1 2025-07-18 05:28:59.007 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:44348 10 6438 1 2025-07-18 05:29:50.555 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:29:50.702 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:29:50.472 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:29:50.705 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:29:50.788 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:24:58.288 00:06:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:29:59.360 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32892 10 6438 1 2025-07-18 05:30:59.775 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55882 10 6438 1 2025-07-18 05:32:00.182 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56142 10 6438 1 2025-07-18 05:33:00.588 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34416 10 6438 1 2025-07-18 05:28:58.292 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 05:34:00.988 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50938 10 6438 1 2025-07-18 05:34:50.580 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:34:50.498 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:34:50.571 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:34:50.572 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:34:50.572 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:35:01.394 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36768 10 6438 1 2025-07-18 05:36:01.801 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6438 1 2025-07-18 05:31:58.289 00:06:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:37:02.204 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38396 10 6438 1 2025-07-18 05:38:02.600 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45734 10 6438 1 2025-07-18 05:39:03.015 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37142 10 6438 1 2025-07-18 05:39:50.960 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:39:50.619 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:39:50.771 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:39:50.665 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:39:50.877 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:40:03.381 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36950 10 6438 1 2025-07-18 05:35:58.294 00:06:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 05:41:03.789 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55938 10 6438 1 2025-07-18 05:42:04.187 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6438 1 2025-07-18 05:43:04.590 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56344 10 6438 1 2025-07-18 05:38:58.291 00:06:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:44:04.994 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43820 10 6438 1 2025-07-18 05:44:50.933 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:44:50.754 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:44:50.760 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:44:50.861 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:44:50.944 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:45:05.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50810 10 6438 1 2025-07-18 05:46:05.760 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51264 10 6438 1 2025-07-18 05:47:06.177 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53770 10 6438 1 2025-07-18 05:42:58.295 00:06:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 05:48:06.580 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47370 10 6438 1 2025-07-18 05:49:06.991 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44830 10 6438 1 2025-07-18 05:49:50.950 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:49:50.951 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:49:50.907 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:49:50.955 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:49:51.037 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:50:07.394 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56082 10 6438 1 2025-07-18 05:45:58.294 00:06:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:51:07.752 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35462 10 6438 1 2025-07-18 05:52:08.156 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37602 10 6438 1 2025-07-18 05:53:08.591 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44138 10 6438 1 2025-07-18 05:54:08.949 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41540 10 6438 1 2025-07-18 05:54:51.046 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 05:54:51.048 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 05:54:50.788 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:54:50.947 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 05:54:51.031 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 05:49:58.298 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-18 05:55:09.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35178 10 6438 1 2025-07-18 05:56:09.773 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42814 10 6438 1 2025-07-18 05:57:10.181 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59836 10 6438 1 2025-07-18 05:52:58.295 00:06:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-18 05:58:10.579 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41308 10 6438 1 Summary: total flows: 138, total bytes: 420914, total packets: 1036, avg bps: 863, avg pps: 0, avg bpp: 406 Time window: 2025-07-18 04:53:58 - 2025-07-18 05:58:58 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0030s User: 0.0008s Wall: 0.0019s flows/second: 74311.7 Runtime: 0.0019s