Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 01:54:01.063 00:06:00.495 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:58:51.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50944 10 6438 1 2025-07-23 01:59:51.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53446 10 6438 1 2025-07-23 02:00:51.920 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43052 10 6438 1 2025-07-23 02:01:52.293 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34042 10 6438 1 2025-07-23 02:02:10.717 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:02:10.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:02:10.802 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:02:10.565 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:02:10.634 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:02:52.693 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:55570 12 10352 1 2025-07-23 01:59:01.068 00:06:00.488 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:03:53.177 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58190 10 6438 1 2025-07-23 02:04:53.589 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50826 10 6438 1 2025-07-23 02:05:53.990 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36350 10 6438 1 2025-07-23 02:01:01.068 00:06:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:06:54.403 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37964 10 6438 1 2025-07-23 02:07:10.937 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:07:10.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:07:10.962 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:07:10.918 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:07:10.856 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:07:54.834 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:34930 12 10352 1 2025-07-23 02:08:55.313 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:43588 10 6438 1 2025-07-23 02:09:55.694 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6438 1 2025-07-23 02:06:01.071 00:06:00.491 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:10:56.107 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35582 10 6438 1 2025-07-23 02:11:56.578 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6438 1 2025-07-23 02:12:10.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:12:10.989 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:12:11.049 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:12:10.817 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:12:10.899 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:08:01.069 00:06:00.496 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:12:56.978 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48180 10 6438 1 2025-07-23 02:13:57.383 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42124 10 6438 1 2025-07-23 02:14:57.787 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43252 10 6438 1 2025-07-23 02:15:58.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60812 10 6438 1 2025-07-23 02:16:58.593 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58144 10 6438 1 2025-07-23 02:17:11.111 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:17:10.666 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:17:11.111 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:17:11.120 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:17:11.193 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:13:01.074 00:06:00.490 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:17:58.997 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6438 1 2025-07-23 02:18:59.413 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 10 6438 1 2025-07-23 02:15:01.071 00:06:00.497 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:19:59.815 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37006 10 6438 1 2025-07-23 02:21:00.218 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60686 10 6438 1 2025-07-23 02:22:11.559 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:22:11.449 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:22:00.626 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49334 10 6438 1 2025-07-23 02:22:11.091 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:22:11.332 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:22:11.416 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:23:01.034 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:44842 12 10352 1 2025-07-23 02:24:01.509 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39956 10 6438 1 2025-07-23 02:20:01.074 00:06:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:25:01.869 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36694 10 6438 1 2025-07-23 02:26:02.282 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60452 10 6438 1 2025-07-23 02:22:01.073 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:27:11.281 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:27:02.698 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37878 10 6438 1 2025-07-23 02:27:11.226 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:27:11.169 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:27:11.214 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:27:11.296 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:28:03.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32996 10 6438 1 2025-07-23 02:29:03.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53282 10 6438 1 2025-07-23 02:30:03.917 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54516 10 6438 1 2025-07-23 02:31:04.329 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43628 10 6438 1 2025-07-23 02:27:01.076 00:06:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:32:11.349 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:32:11.266 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:32:11.617 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:32:11.366 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:32:11.042 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:32:04.734 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41476 10 6438 1 2025-07-23 02:33:05.110 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58110 10 6438 1 2025-07-23 02:29:01.073 00:06:00.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:34:05.506 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37348 10 6438 1 2025-07-23 02:35:05.909 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45618 10 6438 1 2025-07-23 02:36:06.274 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51392 10 6438 1 2025-07-23 02:37:11.398 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:37:11.541 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:37:11.423 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:37:11.534 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:37:11.616 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:37:06.676 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58742 10 6438 1 2025-07-23 02:38:07.107 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37664 10 6438 1 2025-07-23 02:34:01.077 00:06:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:39:07.468 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41136 10 6438 1 2025-07-23 02:40:07.873 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48488 10 6438 1 2025-07-23 02:36:01.074 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:41:08.279 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6438 1 2025-07-23 02:42:11.763 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:42:11.902 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:42:11.835 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:42:11.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:42:11.843 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:42:08.645 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43800 10 6438 1 2025-07-23 02:43:09.056 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53704 10 6438 1 2025-07-23 02:44:09.468 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 10 6438 1 2025-07-23 02:45:09.874 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34374 10 6438 1 2025-07-23 02:41:01.080 00:06:00.491 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:46:10.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55452 10 6438 1 2025-07-23 02:47:12.409 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:47:12.217 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:47:12.256 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:47:12.328 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:47:12.464 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:47:10.685 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34666 10 6438 1 2025-07-23 02:43:01.078 00:06:00.496 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:48:11.111 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 12 10350 1 2025-07-23 02:49:11.589 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56346 10 6438 1 2025-07-23 02:50:11.958 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49974 10 6438 1 2025-07-23 02:51:12.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44756 10 6438 1 2025-07-23 02:52:11.794 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:52:11.746 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:52:11.422 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:52:11.754 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:52:11.838 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:52:12.766 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 10 6438 1 2025-07-23 02:48:01.081 00:06:00.491 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:53:13.144 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 10 6438 1 2025-07-23 02:54:13.563 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35648 10 6438 1 2025-07-23 02:50:01.079 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:55:13.966 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58298 10 6438 1 2025-07-23 02:56:14.328 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34510 10 6438 1 2025-07-23 02:57:11.874 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:57:11.799 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:57:11.524 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:57:11.795 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:57:11.879 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:57:14.726 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 10 6438 1 2025-07-23 02:58:15.121 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59790 10 6438 1 Summary: total flows: 137, total bytes: 431691, total packets: 1026, avg bps: 893, avg pps: 0, avg bpp: 420 Time window: 2025-07-23 01:54:01 - 2025-07-23 02:58:25 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0028s User: 0.0014s Wall: 0.0021s flows/second: 66345.6 Runtime: 0.0021s